Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: delZl2jNWGRyJgDJujMf2Zt40iaOAmHIfkX+X9GSaHc=
Subject key identifier: EF:88:52:F8:96:C4:B0:F8:F0:F9:5F:58:17:D0:F4:12:D4:94:C0:72
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 01A0E3624CB55B100791E2A24EC20E9D4446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 01C9
Signing time: Sun 27 Sep 2026 15:01:05 +0000
Manifest this update: Sun 27 Sep 2026 15:01:05 +0000
Manifest next update: Mon 28 Sep 2026 15:01:05 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: SWXeIYEat1YYQdOyz3TMVX9+YZqnV0/Cq5LYINKDb44=)
2: O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa (hash: GC8qNwD4vLhbf1Ux7vQLpVBwBRtyOha518PQltW/PIg=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:4c:b5:5b:10:07:91:e2:a2:4e:c2:0e:9d:44:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Sep 27 15:01:05 2026 GMT
Not After : Sep 28 15:01:05 2026 GMT
Subject: CN=ef8852f896c4b0f8f0f95f5817d0f412d494c072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:f1:88:17:a3:88:49:bd:f6:91:7c:de:81:
34:24:f6:bb:0e:ff:da:23:f4:09:81:3b:52:79:9c:
05:7d:10:a3:3a:74:37:e1:1d:c9:e6:2c:98:43:77:
5a:6a:c5:0e:36:9c:b5:ba:64:e0:48:42:d0:bb:01:
d6:e0:b6:e3:cd:7e:fd:50:47:8a:25:5d:a7:6b:df:
6c:eb:db:d8:c4:a0:ec:73:f4:64:c9:af:0a:a9:5d:
ee:19:7f:75:7f:c0:a7:27:10:3d:b7:a3:06:8c:37:
1c:6c:c0:93:ef:08:81:f6:96:4c:84:b4:15:27:30:
e4:9f:31:a9:1a:f4:d0:8b:e5:7c:c1:fe:72:74:c9:
65:dd:14:62:f6:68:16:a3:2c:52:4b:85:bb:77:ae:
0c:5b:3c:32:e3:56:95:8d:b0:48:36:9d:92:e4:4a:
0e:6e:55:89:d5:cc:97:81:b9:12:27:23:ce:1c:1f:
b6:f7:42:1a:e0:f8:9b:ba:71:bb:52:ff:e8:9c:25:
bc:00:88:1a:47:2b:d9:c1:ed:02:19:d8:cf:30:0f:
ed:81:35:d4:36:27:b3:db:c8:70:8d:b5:fb:9c:e0:
90:d4:36:2d:8c:31:87:4c:6e:e3:0c:e4:c0:5a:df:
f4:00:83:c4:ad:3c:fe:67:30:67:04:5b:54:44:8b:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:88:52:F8:96:C4:B0:F8:F0:F9:5F:58:17:D0:F4:12:D4:94:C0:72
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ae:ca:f9:9d:98:b8:3c:54:30:20:97:78:6f:9d:30:9e:ed:
38:ef:7d:b2:88:ca:e5:8d:3c:8c:cb:f7:68:49:10:7a:21:e2:
cf:88:b9:35:38:64:64:f4:f8:58:6f:d5:51:e8:21:a0:e2:ed:
35:76:64:18:8e:49:0a:c0:53:50:10:62:1b:10:bd:24:2c:e3:
03:1f:83:b9:64:36:f4:e2:9f:56:b1:31:35:57:4b:63:9d:f1:
1f:f5:c2:12:25:b4:bb:f7:ae:db:a5:06:8c:ba:1a:6c:da:15:
73:9b:f1:16:91:f7:f7:18:26:03:5b:b5:d6:11:b1:98:38:4b:
39:79:3e:09:86:e5:2a:a0:7d:43:65:8c:90:89:a9:07:c1:ab:
ef:8a:17:fe:19:72:35:3a:da:e1:e7:67:3a:bf:55:c8:ec:80:
25:15:f8:57:ca:9e:37:3d:4f:39:11:5d:1f:62:23:0b:44:f3:
5c:a8:5d:57:1c:6b:89:23:4e:03:df:be:52:43:4d:d6:76:0a:
09:75:50:a9:8b:73:9e:ee:fc:2b:16:2e:2b:ea:61:b6:29:2b:
05:4d:0a:1d:cd:bb:f9:59:f8:d4:fc:30:6e:21:78:98:1d:e6:
e5:b3:72:7c:de:4d:53:87:4e:38:97:53:42:29:17:39:a9:40:
87:d4:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:07 2026 by rpki-client